Stenographer
Stenographer is a full-packet-capture utility designed for buffering packets to disk for intrusion detection and incident response purposes. It offers high-performance NIC-to-disk packet writing, efficient disk management to handle file deletion as disk space fills up, and easy retrieval of specific packet sets. It excels in quickly writing packets to disk at speeds of around 10Gbps on multi-core, multi-disk systems, managing disk usage to store longer durations during traffic lulls, and deleting the oldest packets when reaching disk limits. However, it is not suitable for complex packet processing like TCP stream reassembly, as its focus on speed sacrifices such functionalities. Additionally, reading back large amounts of packets (>1% of packets written) can lead to disk read and write competition issues.
FEATURES
ALTERNATIVES
A simple IOC scanner bash script for Linux/Unix/OSX systems
A powerful and extensible framework for reconnaissance and attacking various networks and devices.
CrowdSec is a behavior detection engine with a global IP reputation network.
Express middleware for detecting and redirecting Tor or Surface users.
Load-balancing solution by Microsoft Azure with global infrastructure and financial guidance.
A set of Go-based emulators for testing network security and analyzing network traffic.
Prisma SASE is a cloud-delivered service integrating network security, SD-WAN, and user experience management for comprehensive protection and optimization of hybrid work environments.
PINNED
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
PTJunior
An AI-powered penetration testing platform that autonomously discovers, exploits, and documents vulnerabilities while generating NIST-compliant reports.
OSINTLeak
OSINTLeak is a tool for discovering and analyzing leaked sensitive information across various online sources to identify potential security risks.
ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.